let's do `module.exports = function(app)` so usage matches other middlewares (and the note above).